The server cannot read your board
Last updated: October 20, 2026
What happens to your board
- Your browser makes a secret key when you make a board. The key is in the link, after the # sign. A browser never sends that part to a server.
- Your browser encrypts the board with the key (AES-GCM) before it sends anything. The shapes, the text, the names and the pointer positions are all encrypted.
- The server keeps an encrypted copy of the board and passes encrypted messages between the people on the board. It cannot read them.
- The server deletes the board 90 days after the last change. Each change starts the 90 days again.
- Anyone who has the full link can see the board and change it. If you lose the link, nobody can open the board again. We cannot find the key for you.
What the server can see
- The board id, which is part of the address.
- The size of the encrypted data and the time of each change.
- How many people are on the board at one time.
The server cannot link a board to a person. There is no account, and we do not store IP addresses.
What stays on your device
- The list of boards you opened (with their links and keys) and your name are in the storage of your browser. They never go to the server. You can remove a board from the list on the start page.
- The page has no ads, no cookies and no tracking.
- If the page has an error, it sends an error report to the server. The report has the error message, page type, browser and app version. It has no board data. The page replaces emails, IP addresses and long numbers in the message.
Who hosts this page
Cloudflare hosts this page. Like any web host, it sees your IP address and the page you ask for. Our own logs have the address of the request, the time and the status. They have no IP address, no key and no board data. For about 1 in 10 requests, Cloudflare also records the browser and operating system, the language, the network and an approximate location. It works these out from your connection.
Questions
Questions, or want a board removed before it expires? Write to kamadorueda@gmail.com and give the link without the key (the part before the # sign).